CVE-2021-30884

webkitgtk: CSS compositing issue leading to revealing of the browsing history

The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously crafted website may reveal a user's browsing history.

CVSS 3.1 · 4.7 Medium EPSS 1.1% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 4 more

CVE-2021-30851

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 1 more

Products

Ipados Iphone Os Macos and 7 more

CVE-2021-30849

webkitgtk: Multiple memory corruption issue leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Itunes and 6 more

CVE-2021-30848

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 3 more

CVE-2021-30846

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 1 more

Products

Ipados Iphone Os Macos and 7 more

CVE-2021-30836

webkitgtk: Out-of-bounds read leading to memory disclosure

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30823

webkitgtk: Logic issue leading to HSTS bypass

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30818

webkitgtk: Type confusion issue leading to arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30809

webkitgtk: Use-after-free leading to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30799

webkitgtk: Memory corruptions leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Apple Redhat

Products

Iphone Os Mac Os X Macos and 2 more

CVE-2021-30797

webkitgtk: Insufficient checks leading to arbitrary code execution

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30795

webkitgtk: Use-after-free leading to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed

Vendors

Apple Redhat

Products

Iphone Os Macos Safari and 4 more

CVE-2021-30758

webkitgtk: Type confusion leading to arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Apple Redhat

Products

Iphone Os Macos Safari and 4 more

CVE-2021-30749

webkitgtk: Memory corruptions leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30744

webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30734

webkitgtk: Memory corruptions leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30720

webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers.

CVSS 3.1 · 5.4 Medium EPSS 1.4% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30689

webkitgtk: Logic issue leading to universal cross site scripting attack

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30682

webkitgtk: Logic issue leading to leak of sensitive user information

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30641

Unexpected URL matching with 'MergeSlashes OFF'

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'

CVSS 3.1 · 5.3 Medium EPSS 51.8% KEV · Not listed

Vendors

Apache Debian Fedoraproject and 2 more

Products

Http Server Debian Linux Fedora and 5 more